Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D654F789C7411F1B90ACA05CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D654F789C7411F1B90ACA05CF1D38B0.roa
File: 3D654F789C7411F1B90ACA05CF1D38B0.roa (raw, json)
Hash identifier: +onbcnRxIw3C8vKLC8RIeN2pqA2Jet2CY85LAh2TxAM=
Subject key identifier: F5:3A:5E:CF:87:97:B6:38:8B:35:B2:64:58:25:05:4B:1A:B2:A0:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CE98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D654F789C7411F1B90ACA05CF1D38B0.roa
Signing time: Thu 20 Aug 2026 08:50:49 +0000
ROA not before: Thu 20 Aug 2026 08:50:45 +0000
ROA not after: Sat 10 Oct 2026 08:50:45 +0000
asID: 63099
IP address blocks: 45.192.115.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/24 maxlen: 24
45.192.229.0/24 maxlen: 24
45.192.230.0/24 maxlen: 24
45.192.231.0/24 maxlen: 24
45.192.232.0/24 maxlen: 24
45.192.233.0/24 maxlen: 24
45.192.234.0/24 maxlen: 24
45.192.235.0/24 maxlen: 24
45.192.236.0/24 maxlen: 24
45.192.237.0/24 maxlen: 24
45.192.238.0/24 maxlen: 24
45.192.239.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118424 (0x1ce98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 08:50:45 2026 GMT
Not After : Oct 10 08:50:45 2026 GMT
Subject: CN=6a86bfe9-2ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:5e:83:0e:31:73:30:ed:50:3a:a1:4d:3c:
d5:3d:33:0f:ed:2b:10:a7:f3:72:17:db:de:dc:05:
7b:de:5c:d8:f7:98:60:98:ab:92:88:3e:e6:86:0c:
61:a6:e3:92:ef:ed:82:de:19:fe:89:b2:70:ab:92:
ba:f3:cc:66:16:a6:91:7e:bb:f4:79:63:62:ec:02:
64:1d:63:e5:60:c6:76:97:59:c9:cf:22:3c:b4:13:
de:fd:0e:66:93:bb:47:84:b4:79:eb:de:78:94:69:
bc:fc:28:0a:3a:9a:37:30:9c:57:d2:54:8f:5c:06:
b2:0d:3d:ab:c3:ea:33:4f:05:7f:14:87:8e:1c:5e:
2b:4e:6e:02:03:92:42:31:36:56:51:84:92:30:68:
72:7c:4c:7b:21:df:19:60:9d:c4:3f:39:4f:36:ce:
b6:ea:1a:36:e7:d6:f4:ef:fc:41:d4:ff:42:f6:36:
d5:41:66:17:1c:b8:36:2a:4c:91:a9:23:34:02:6f:
87:30:04:e0:e1:d2:b1:ea:28:4b:69:54:4a:1b:4e:
ae:4a:e7:df:b9:0b:43:b8:43:b2:6d:01:94:09:69:
51:c0:a6:67:73:b7:b6:15:55:41:e9:9c:e3:12:81:
83:bc:18:3f:58:02:11:95:21:a0:a1:bb:36:d5:16:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:5E:CF:87:97:B6:38:8B:35:B2:64:58:25:05:4B:1A:B2:A0:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D654F789C7411F1B90ACA05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.115.0/24
45.192.166.0/24
45.192.227.0-45.192.239.255
45.196.226.0/24
45.198.231.0/24
45.201.30.0-45.201.32.255
Signature Algorithm: sha256WithRSAEncryption
11:95:b5:fb:94:f4:0d:f2:60:f7:13:95:e1:64:2a:39:44:f5:
59:a8:77:c1:ee:f4:79:20:bc:7c:c8:6b:ab:4f:e3:9c:3d:53:
01:cf:43:15:4e:12:20:7f:4d:3b:5c:8d:f9:87:df:4d:a1:6d:
0d:fa:90:d3:79:27:a6:9b:f8:3c:25:8f:5f:a9:cf:ba:b0:09:
27:4b:08:46:80:dd:87:af:21:59:ff:92:aa:2d:25:90:40:aa:
b1:f7:74:40:42:36:4a:21:95:19:7f:0c:e7:c1:75:e1:91:90:
47:e3:9e:9c:74:3a:0f:8e:84:d6:14:0b:76:14:19:e2:a0:fa:
c5:40:23:dc:02:30:37:1b:fe:24:1c:e3:0d:af:67:e2:6c:ef:
e2:78:3c:24:e0:29:cf:70:ed:66:4d:6b:13:2b:e8:5b:bf:5b:
34:62:79:50:fe:af:cd:6f:42:ea:ed:3d:c5:b6:8d:b7:73:e2:
66:21:fa:ec:31:61:f5:b5:8d:fb:19:5a:3d:90:83:d9:39:2c:
31:ff:80:e3:83:c4:d1:99:6c:e3:05:e0:ff:3c:d5:73:bc:5f:
b6:b0:5e:84:63:fe:35:aa:0a:31:c1:d9:b9:35:6c:7f:70:58:
83:6c:f5:53:ab:ec:0d:6e:46:c4:7d:ee:2f:ac:4e:86:39:0f:
f3:ac:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:27:01 2026 by rpki-client